I am having problems with DNS

Zapnologica · Sat Jul 03, 2010 10:20 pm

I setup a mikrotik RB750 for a company to act as their internet router.

I did it my house and it worked perfectly. Went to clients building and changed the PPPoE username and password.

and the internet seemed to come and go.

but one thing i noticed is that skype was allways on. but if i went on the net it just did nothing and windows kept trying to dial my dial up accounts.

So to me i think there is an error with the DNS, but there are like 3 settings for DNS how can it go wrong???????

The pppoe account has "user peer dns" and "add default route" clicked and then on dns it has "allow remote requests" clicked.

What could be wrong. I must say i am so fustrated with the dam thing.

PLs assist me.

fewi · Sat Jul 03, 2010 10:31 pm

Post a network diagram and the configuration.

Zapnologica · Sat Jul 03, 2010 11:03 pm

Which config should i do.

The ideal one i want to get working.

Cause i setup my router and then when it didnt work i bit by bit deleted settings till i was left with a very basic setup?

Zapnologica · Sat Jul 03, 2010 11:42 pm

Ok here is my config,

ignore the bridge inferface as thats just inplace so my internet can work.
and ether5 ip should be 192.168.0.1/24 but i changed it to make my internet work.

The adsl modem is connected to ether1 and the network to ether5
ether 2 is a backup internet connnection (not modem just network)

PPPoE Server on ether5 with userman.

i will try attach my hand drawen network diagram, my nets nto workin so lekka

[admin@Zapotel] > export
# jan/02/1970 12:09:00 by RouterOS 4.10
# software id = 4JMB-V6Y1
#
/interface bridge
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes \
    comment="" disabled=no forward-delay=15s l2mtu=1524 max-message-age=20s \
    mtu=1500 name=bridge1 priority=0x8000 protocol-mode=none \
    transmit-hold-count=6
/interface ethernet
set 0 arp=enabled auto-negotiation=yes comment="Main Line" disabled=no \
    full-duplex=yes l2mtu=1526 mac-address=00:0C:42:80:60:6E mtu=1500 name=\
    ether1 speed=100Mbps
set 1 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited comment=\
    "Backup Line" disabled=no full-duplex=yes l2mtu=1524 mac-address=\
    00:0C:42:80:60:6F master-port=none mtu=1500 name=ether2 speed=100Mbps
set 2 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited comment=\
    "" disabled=yes full-duplex=yes l2mtu=1524 mac-address=00:0C:42:80:60:70 \
    master-port=none mtu=1500 name=ether3 speed=100Mbps
set 3 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited comment=\
    "" disabled=yes full-duplex=yes l2mtu=1524 mac-address=00:0C:42:80:60:71 \
    master-port=none mtu=1500 name=ether4 speed=100Mbps
set 4 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited comment=\
    "" disabled=no full-duplex=yes l2mtu=1524 mac-address=00:0C:42:80:60:72 \
    master-port=none mtu=1500 name=ether5 speed=100Mbps
/interface ethernet switch
set switch1 mirror-source=none mirror-target=none name=switch1
/ip hotspot profile
set default dns-name="" hotspot-address=0.0.0.0 html-directory=hotspot \
    http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap \
    name=default rate-limit="" smtp-server=0.0.0.0 split-user-domain=no \
    use-radius=no
/ip hotspot user profile
set default idle-timeout=none keepalive-timeout=2m name=default shared-users=\
    1 status-autorefresh=1m transparent-proxy=no
/ip ipsec proposal
set default auth-algorithms=sha1 comment="" disabled=no enc-algorithms=3des \
    lifetime=30m name=default pfs-group=modp1024
/ip pool
add name=Zapotel_PPPoE ranges=192.168.0.200-192.168.0.225
add name=DHCP ranges=192.168.0.100-192.168.0.120
add name=dhcp_pool1 ranges=192.168.0.100-192.168.0.120
/ip dhcp-server
add address-pool=dhcp_pool1 authoritative=after-2sec-delay bootp-support=\
    static disabled=yes interface=ether5 lease-time=3d name=dhcp1
/ppp profile
set default change-tcp-mss=yes comment="" local-address=192.168.0.2 name=\
    default only-one=default remote-address=Zapotel_PPPoE use-compression=\
    default use-encryption=default use-vj-compression=default
set default-encryption change-tcp-mss=yes comment="" name=default-encryption \
    only-one=default use-compression=default use-encryption=yes \
    use-vj-compression=default
/interface pppoe-client
add ac-name="" add-default-route=yes allow=pap,chap,mschap1,mschap2 comment=\
    "Internet Connection Out" dial-on-demand=no disabled=no interface=ether1 \
    max-mru=1480 max-mtu=1480 mrru=disabled name=pppoe-out1 password=\
    somelaco88 profile=default service-name=ADSL use-peer-dns=yes user=\
    camlotm@wadsl
/queue type
set default kind=pfifo name=default pfifo-limit=50
set ethernet-default kind=pfifo name=ethernet-default pfifo-limit=50
set wireless-default kind=sfq name=wireless-default sfq-allot=1514 \
    sfq-perturb=5
set synchronous-default kind=red name=synchronous-default red-avg-packet=1000 \
    red-burst=20 red-limit=60 red-max-threshold=50 red-min-threshold=10
set hotspot-default kind=sfq name=hotspot-default sfq-allot=1514 sfq-perturb=\
    5
set default-small kind=pfifo name=default-small pfifo-limit=10
/routing bgp instance
set default as=65530 client-to-client-reflection=yes comment="" disabled=no \
    ignore-as-path-len=no name=default out-filter="" redistribute-connected=\
    no redistribute-ospf=no redistribute-other-bgp=no redistribute-rip=no \
    redistribute-static=no router-id=0.0.0.0 routing-table=""
/routing ospf instance
set default comment="" disabled=no distribute-default=never in-filter=ospf-in \
    metric-bgp=auto metric-connected=20 metric-default=1 metric-other-ospf=\
    auto metric-rip=20 metric-static=20 name=default out-filter=ospf-out \
    redistribute-bgp=no redistribute-connected=no redistribute-other-ospf=no \
    redistribute-rip=no redistribute-static=no router-id=0.0.0.0
/routing ospf area
set backbone area-id=0.0.0.0 comment="" disabled=no instance=default name=\
    backbone type=default
/snmp
set contact="" enabled=no engine-boots=0 engine-id="" location="" \
    time-window=15 trap-sink=0.0.0.0 trap-version=1
/snmp community
set public address=0.0.0.0/0 authentication-password="" \
    authentication-protocol=MD5 encryption-password="" encryption-protocol=\
    DES name=public read-access=yes security=none write-access=no
/system logging action
set memory memory-lines=100 memory-stop-on-full=no name=memory target=memory
set disk disk-file-count=2 disk-file-name=log disk-lines-per-file=100 \
    disk-stop-on-full=no name=disk target=disk
set echo name=echo remember=yes target=echo
set remote bsd-syslog=no name=remote remote=0.0.0.0:514 src-address=0.0.0.0 \
    syslog-facility=daemon syslog-severity=auto target=remote
/system routerboard settings
set boot-device=nand-if-fail-then-ethernet boot-protocol=bootp cpu-frequency=\
    400MHz force-backup-booter=no silent-boot=no
set boot-device=nand-if-fail-then-ethernet boot-protocol=bootp cpu-frequency=\
    400MHz force-backup-booter=no silent-boot=no
/user group
add comment="" name=read policy="local,telnet,ssh,reboot,read,test,winbox,pass\
    word,web,sniff,sensitive,!ftp,!write,!policy"
add comment="" name=write policy="local,telnet,ssh,reboot,read,write,test,winb\
    ox,password,web,sniff,sensitive,!ftp,!policy"
add comment="" name=full policy="local,telnet,ssh,ftp,reboot,read,write,policy\
    ,test,winbox,password,web,sniff,sensitive"
/interface bridge port
add bridge=bridge1 comment="" disabled=no edge=auto external-fdb=auto \
    horizon=none interface=ether1 path-cost=10 point-to-point=auto priority=\
    0x80
add bridge=bridge1 comment="" disabled=no edge=auto external-fdb=auto \
    horizon=none interface=ether5 path-cost=10 point-to-point=auto priority=\
    0x80
/interface bridge settings
set use-ip-firewall=no use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=\
    no
/interface ethernet switch port
set (unknown) vlan-header=leave-as-is vlan-mode=fallback
set (unknown) vlan-header=leave-as-is vlan-mode=fallback
set (unknown) vlan-header=leave-as-is vlan-mode=fallback
set (unknown) vlan-header=leave-as-is vlan-mode=fallback
/interface l2tp-server server
set authentication=pap,chap,mschap1,mschap2 default-profile=\
    default-encryption enabled=no max-mru=1460 max-mtu=1460 mrru=disabled
/interface ovpn-server server
set auth=sha1,md5 certificate=none cipher=blowfish128,aes128 default-profile=\
    default enabled=no keepalive-timeout=60 mac-address=FE:96:75:0D:2B:67 \
    max-mtu=1500 mode=ip netmask=24 port=1194 require-client-certificate=no
/interface pppoe-server server
add authentication=pap,chap,mschap1,mschap2 default-profile=default disabled=\
    no interface=ether5 keepalive-timeout=10 max-mru=1480 max-mtu=1480 \
    max-sessions=0 mrru=disabled one-session-per-host=no service-name=\
    PPPoE_Server
/interface pptp-server server
set authentication=mschap1,mschap2 default-profile=default-encryption \
    enabled=no keepalive-timeout=30 max-mru=1460 max-mtu=1460 mrru=disabled
/ip accounting
set account-local-traffic=no enabled=yes threshold=256
/ip accounting web-access
set accessible-via-web=no address=0.0.0.0/0
/ip address
add address=192.168.0.121/24 broadcast=192.168.0.255 comment="" disabled=no \
    interface=ether5 network=192.168.0.0
add address=192.168.0.10/24 broadcast=192.168.0.254 comment="" disabled=no \
    interface=ether1 network=192.168.0.0
/ip dhcp-server config
set store-leases-disk=5m
/ip dhcp-server network
add address=192.168.0.0/24 comment="" gateway=192.168.0.1
/ip dns
set allow-remote-requests=yes cache-max-ttl=1w cache-size=2048KiB \
    max-udp-packet-size=512 servers=196.220.59.188,196.220.59.189
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \
    tcp-close-wait-timeout=10s tcp-established-timeout=1d \
    tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s \
    tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no \
    tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall nat
add action=masquerade chain=srcnat comment="" disabled=no src-address=\
    192.168.0.0/24
add action=dst-nat chain=dstnat comment="" disabled=no dst-port=3389 \
    protocol=tcp to-addresses=192.168.0.5 to-ports=3389
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no
/ip hotspot service-port
set ftp disabled=no ports=21
/ip neighbor discovery
set ether1 discover=yes
set ether2 discover=yes
set ether3 discover=yes
set ether4 discover=yes
set ether5 discover=yes
set pppoe-out1 discover=no
set bridge1 discover=yes
/ip proxy
set always-from-cache=no cache-administrator=webmaster cache-hit-dscp=4 \
    cache-on-disk=no enabled=no max-cache-size=none max-client-connections=\
    600 max-fresh-time=3d max-server-connections=600 parent-proxy=0.0.0.0 \
    parent-proxy-port=0 port=8080 serialize-connections=no src-address=\
    0.0.0.0
/ip route
add check-gateway=ping comment="" disabled=no distance=1 dst-address=\
    0.0.0.0/0 gateway=pppoe-out1 scope=30 target-scope=10
add comment="" disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
    192.168.1.1 scope=30 target-scope=10
/ip service
set telnet address=0.0.0.0/0 disabled=no port=23
set ftp address=0.0.0.0/0 disabled=no port=21
set www address=0.0.0.0/0 disabled=no port=80
set ssh address=0.0.0.0/0 disabled=no port=22
set www-ssl address=0.0.0.0/0 certificate=none disabled=yes port=443
set api address=0.0.0.0/0 disabled=yes port=8728
set winbox address=0.0.0.0/0 disabled=no port=8291
/ip socks
set connection-idle-timeout=2m enabled=no max-connections=200 port=1080
/ip traffic-flow
set active-flow-timeout=30m cache-entries=4k enabled=no \
    inactive-flow-timeout=15s interfaces=all
/ip upnp
set allow-disable-external-interface=yes enabled=no show-dummy-rule=yes
/mpls
set dynamic-label-range=16-1048575 propagate-ttl=yes
/mpls interface
add comment="" disabled=no interface=all mpls-mtu=1508
/mpls ldp
set distribute-for-default-route=no enabled=no hop-limit=255 loop-detect=no \
    lsr-id=0.0.0.0 path-vector-limit=255 transport-address=0.0.0.0 \
    use-explicit-null=no
/ppp aaa
set accounting=yes interim-update=0s use-radius=yes
/ppp secret
add caller-id="" comment="" disabled=no limit-bytes-in=0 limit-bytes-out=0 \
    name=mikrotik password=1234 routes="" service=pppoe
add caller-id="" comment="" disabled=no limit-bytes-in=0 limit-bytes-out=0 \
    name=vita password=1234 profile=default routes="" service=pppoe
/queue interface
set ether1 queue=ethernet-default
set ether2 queue=ethernet-default
set ether3 queue=ethernet-default
set ether4 queue=ethernet-default
set ether5 queue=ethernet-default
set pppoe-out1 queue=default
set bridge1 queue=default
/radius
add accounting-backup=no accounting-port=1813 address=192.168.0.1 \
    authentication-port=1812 called-id="" comment="" disabled=no domain="" \
    realm="" secret=123456 service=ppp,hotspot timeout=300ms
/radius incoming
set accept=no port=3799
/routing bfd interface
set all comment="" disabled=no interface=all interval=0.2sec min-rx=0.2sec \
    multiplier=5
/routing mme
set bidirectional-timeout=2 gateway-class=none gateway-keepalive=1m \
    gateway-selection=no-gateway origination-interval=5s preferred-gateway=\
    0.0.0.0 timeout=1m ttl=50
/routing rip
set distribute-default=never garbage-timer=2m metric-bgp=1 metric-connected=1 \
    metric-default=1 metric-ospf=1 metric-static=1 redistribute-bgp=no \
    redistribute-connected=no redistribute-ospf=no redistribute-static=no \
    routing-table=main timeout-timer=3m update-timer=30s
/store
add comment="" disabled=no disk=system name=user-manager1 type=user-manager
add comment="" disabled=no disk=system name=web-proxy1 type=web-proxy
/system clock
set time-zone-name=manual
/system clock manual
set dst-delta=+00:00 dst-end="jan/01/1970 00:00:00" dst-start=\
    "jan/01/1970 00:00:00" time-zone=+00:00
/system console
add disabled=no term=vt102
/system health
set
/system identity
set name=Zapotel
/system logging
add action=memory disabled=no prefix="" topics=info
add action=memory disabled=no prefix="" topics=error
add action=memory disabled=no prefix="" topics=warning
add action=echo disabled=no prefix="" topics=critical
/system note
set note="" show-at-login=yes
/system ntp client
set enabled=yes mode=unicast primary-ntp=196.35.241.17 secondary-ntp=\
    146.64.58.41
/system upgrade mirror
set check-interval=1d enabled=no primary-server=0.0.0.0 secondary-server=\
    0.0.0.0 user=""
/system watchdog
set auto-send-supout=no automatic-supout=yes no-ping-delay=5m watch-address=\
    none watchdog-timer=yes
/tool bandwidth-server
set allocate-udp-ports-from=2000 authenticate=yes enabled=yes max-sessions=\
    100
/tool e-mail
set from=<> password="" server=0.0.0.0:25 username=""
/tool graphing
set page-refresh=300 store-every=5min
/tool graphing interface
add allow-address=0.0.0.0/0 disabled=no interface=all store-on-disk=yes
/tool mac-server
add disabled=no interface=all
/tool mac-server ping
set enabled=yes
/tool sms
set allowed-number="" channel=0 keep-max-sms=0 receive-enabled=no secret=""
/tool sniffer
set file-limit=10 file-name="" filter-address1=0.0.0.0/0:0-65535 \
    filter-address2=0.0.0.0/0:0-65535 filter-protocol=ip-only filter-stream=\
    yes interface=all memory-limit=10 memory-scroll=no only-headers=no \
    streaming-enabled=no streaming-server=0.0.0.0
/tool user-manager customer
add comment="" currency=RAND date-format=%b/%d/%Y disabled=no login=admin \
    parent=admin password=admin paypal-accept-pending=yes paypal-allowed=yes \
    paypal-business-id=zapotech@webmail.co.za paypal-secure-response=yes \
    permissions=owner signup-allowed=yes signup-email-body="Your authorization\
    \_data:\r\
    \nlogin: %login%\r\
    \npassword: %password%\r\
    \n\r\
    \nTo check your status and buy extended time go to address  %link%\r\
    \n" signup-email-subject="Account info" subscriber=admin time-zone=+00:00
/tool user-manager router
add comment="" disabled=no ip-address=192.168.0.1 log=\
    auth-ok,auth-fail,acct-fail name=RB750 shared-secret=123456 subscriber=\
    admin
/tool user-manager user
add comment="" disabled=no name=camelot password=1234 subscriber=admin
add comment="" disabled=no name=vita password=1234 subscriber=admin \
    transfer-limit=2
add comment="" disabled=no name=user10 password=1234 subscriber=admin \
    transfer-limit=2
/user aaa
set accounting=yes default-group=read interim-update=0s use-radius=no
[admin@Zapotel] > config print

adrianatkins · Sun Jul 04, 2010 12:16 am

and the internet seemed to come and go.

Do you mean that pinging a public IP address fails sometimes, the pppoe interface comes up/goes down, or just that sometimes web pages will not load ?

The pppoe account has "user peer dns"

Have you tried un-ticking that and setting static DNS server entries ?

Maybe they ISP's pppoe server is busted, or their DNS servers are busted.

Zapnologica · Sun Jul 04, 2010 1:47 pm

I tried cmd ping website -t

and left it on, there where many time outs.

But its weird it wil work for 30min and then stop working, but skype which does not use dns worked all the time.

i will try a static ip. but what IP do i put in there??

Cause i must say this gateway is for a ISP of 10 clients. i cant have it being unreliable at all. So i dono what to do?

Is there a way to test if the ADSL line is faulty?

SurferTim · Sun Jul 04, 2010 2:00 pm

I see you have a bridge (bridge1) in your setup. ether1 and ether5 are both assigned to it, each with their own ips, but duplicate subnets, and no ip assigned to the bridge. That may be a bit unstable.

Zapnologica · Sun Jul 04, 2010 2:28 pm

ignore the bridge inferface as thats just inplace so my internet can work.
and ether5 ip should be 192.168.0.1/24 but i changed it to make my internet work.

THat bridge is just inplace now so the internet will work. (im bypassig the mikrotik) im using the stock adsl router.

SurferTim · Sun Jul 04, 2010 2:36 pm

Which config should i do.

The ideal one i want to get working.

Cause i setup my router and then when it didnt work i bit by bit deleted settings till i was left with a very basic setup?
THat bridge is just inplace now so the internet will work. (im bypassig the mikrotik) im using the stock adsl router.

Then you also changed your dhcp server to issue the 192.168.0.x ips rather than your private ip subnet assignment? I see no ip assignment on any other interface. ??

ADD: It appears your local address on the ADSL connection is 192.168.0.2. Then the gateway on that network is 192.168.0.1/24, correct?

If so:
assign a 192.168.2.1/24 ip subnet on ether2
add default route with gateway 192.168.0.1
insure you have a masquerade in 'ip firewall nat'
set up dhcp server on ether2
try ether2.

Zapnologica · Sun Jul 04, 2010 2:54 pm

ether5 connects to a 48port hub. So i dont use ether 3 and 4.

Im not sure what you mean about the DHCP?

But most of the testing i have done is static ip. the DHCP is just for the odd guest that needs to connect.

So normaly i would have this config:

Ether1:
With PPPoE client called (ineternet1)
Use peer DNS

Ether2:
IP:192.168.1.10/24 (the gateway on this network is 192.168.1.1)

Ether5:
192.168.0.1
PPPoE server (IP:192.168.0.2) And gives out IP POOL (192.168.0.200-192.168.0.254)
DHCP server 192.168.0.100-192.168.0.120

Firewall:
NAT: source: 192.168.0.0/24
Action: masquerade

Static Route1:
Source: 192.168.0.0/24
gateway: internet1
Check gateway: ping
Distance 1

Static Route2:
Source: 192.168.0.0/24
gateway: ether2 / 192.168.1.1 (im not sure which one to use) but i tried both i think the IP is better
Check gateway: none
Distance 2

DNS:
"allow remote requests"

SurferTim · Sun Jul 04, 2010 2:57 pm

Your wan network (ether1) is 192.168.0.0/24
Your lan network (ether5) is 192.168.0.0/24
Your lan computers are 192.168.0.0/24

Did you see my add to the post above about ether2?

Can you show me "/ip route"?

ADD: The reason I ask is; it appears you are only default routing the 192.168.0.0 net.

Zapnologica · Sun Jul 04, 2010 3:23 pm

Im only useing internet on the 192.168.0.0/24 range

Ether 2 is a upstream network. its a backup internet connection.

So there is just 1 gateway on that network ip of 192.168.1.1 and thats it.

if internet coonection on ether1 fails it uses the internet on ether 2.

But i was thinking for DNS problems.

Could i use some thing like OPENDNS and set the IP DNS to static and therefor the mikrotik will not act as a dns server.

As much as i want it to be a dns server it just gives me problems.

SurferTim · Sun Jul 04, 2010 3:27 pm

I would try the static dns then. Set them to the same ips that you used where it worked!

Zapnologica · Sun Jul 04, 2010 3:29 pm

So must i put the static DNS in the mikrotik.

So must i just unclick "allow remote requests"

or under DNS servers on the computer???

SurferTim · Sun Jul 04, 2010 3:31 pm

Just set the two dns server ips in "/ip dns". Leave "allow-remote-requests=yes"

If it is not the way you connect to the router, as a test, disable ether1 and insure your backup internet route works.

ADD: presuming all worked with the switch, I would use the dns servers (or at least try them) that are assigned in the computers with static ip assignments.

Now that you have the equivalent of two switches in series, what is the purpose of the router?

Zapnologica · Sun Jul 04, 2010 5:09 pm

check the attached pic. thats my home made network diagram.

the devices with blue dots are not my network.'

the purpose of the router is the main ISP internet gateway and usermanager.

it worked fine at my house, but then when i went to install it at the location it didnt work. So maybe it does not like the ISPS dns servers.

if dns is working correctly will the websites appear under the Cache tab?/

SurferTim · Sun Jul 04, 2010 6:00 pm

If the goal was a backup internet connection, that is a good reason!

Zapnologica · Sun Jul 04, 2010 9:53 pm

Do mikrotiks act as a DNS server or do they just tansfer it to the ISPs DNS servers??

Zapnologica · Sun Jul 04, 2010 9:53 pm

Do mikrotiks act as a DNS server or do they just tansfer it to the ISPs DNS servers??

fewi · Sun Jul 04, 2010 10:32 pm

I tried cmd ping website -t
and left it on, there where many time outs.
But its weird it wil work for 30min and then stop working, but skype which does not use dns worked all the time.
i will try a static ip. but what IP do i put in there??
Cause i must say this gateway is for a ISP of 10 clients. i cant have it being unreliable at all. So i dono what to do?
Is there a way to test if the ADSL line is faulty?

DNS only gets resolved at the beginning of a ping. It doesn't resolve again for every packet. If a ping drops after 30 minutes there's something wrong with the line, not with DNS. Call your provider.

fewi · Sun Jul 04, 2010 10:33 pm

Do mikrotiks act as a DNS server or do they just tansfer it to the ISPs DNS servers??

That question doesn't really make sense. They act as authoritative servers for entries that you tell them to be authoritative for, and as caching resolvers for everything else. You should read up on how DNS works if you're going to charge people money for providing Internet services.

Zapnologica · Mon Jul 05, 2010 12:16 am

I have been. and i intend to do some more.

I semi under stand it.

I get that when pinging it it only uses DNS to find the websites IP.

I know this is not really a propper diagnostic. but why would skype be working but not IE?

IE keeps trying to dial a connection. but i can phone my friend on skype. Is that a NAT firewall rule or what?

mcb · Mon Jul 05, 2010 1:37 am

Try to reconfigure the NS2 in bridge mode, just leave some IP for management.
Then configure the router in a normal way - with 2 WAN IPs and 1 internal subnet. Then add both ISPs DNS servers AND 8.8.8.8 to Mikrotiks DNS. Masquerade and other stuff (like static DHCP leases). And forget the PPPoE on internal network.
Simple setup, nothing special

fewi · Mon Jul 05, 2010 3:04 am

Do you have NAT rules specific to the ports Skype uses? If not, how would NAT come into it?

Again, if your cicrcuits drops arbitrarily call your provider.

Zapnologica · Mon Jul 05, 2010 12:34 pm

Ok cool i have done that.

i unclicked use peer dns and then i created a opendns accoutn and put in those ips into the dns and it seems to be workign ok now.

So now i know if it drops to phone telkom.'

Thanks allot guys/

I am having problems with DNS

I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Re: I am having problems with DNS

Who is online